Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: DsZiZE5mWhyQ+75PLZxX14OH3hIFak7GNXCgjLCaHAI=
Subject key identifier: FB:DE:3B:3F:54:BE:9B:0D:73:35:0B:9E:FA:EE:07:49:25:B8:8F:86
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 01967D57A72AA7CD7D74118F0AD286858B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 17:00:18 +0000
Manifest this update: Mon 28 Apr 2025 17:00:18 +0000
Manifest next update: Tue 29 Apr 2025 17:00:18 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: JdEiCB7DDXTDvV8ggoPbHG+IreQbDAGc8+PchrgAjAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:a7:2a:a7:cd:7d:74:11:8f:0a:d2:86:85:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Apr 28 17:00:18 2025 GMT
Not After : Apr 29 17:00:18 2025 GMT
Subject: CN=fbde3b3f54be9b0d73350b9efaee074925b88f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:e6:ee:f7:e8:96:59:01:b9:4c:a4:da:26:
71:3b:b3:cd:6a:34:29:9f:4f:f0:bf:2f:98:c3:f2:
34:c7:f6:cf:3a:2d:2a:11:d9:c2:a7:bb:53:37:d9:
2d:03:fd:b8:dd:a3:3a:bd:5a:5e:29:b1:ce:4d:d5:
4c:a9:8a:1c:93:28:b1:07:f5:e5:cf:3b:ef:81:2b:
a4:23:72:b9:ec:7e:57:d2:bf:b6:9e:3e:07:e6:62:
71:08:41:2b:ab:a4:dd:ad:36:61:d2:20:49:09:28:
ca:b4:52:d4:fc:3d:79:13:10:cd:9f:83:ca:b4:45:
3a:9a:a7:07:89:07:6c:3a:09:3c:03:57:0d:04:47:
f7:52:bf:73:68:40:f0:f2:04:3c:c3:ef:43:be:79:
e8:38:a8:d0:50:4f:4d:b5:42:41:54:0b:dd:ce:65:
d4:97:33:49:64:54:b1:09:69:ef:e1:c7:e3:14:a1:
b3:a2:8d:62:a4:fa:3f:24:1f:80:7d:b7:98:b2:2d:
dd:a0:d8:bb:2b:ab:c8:38:34:06:c8:8d:d5:fd:0c:
79:e2:10:17:a7:42:ee:41:bc:ff:bb:1d:7b:89:5f:
6a:05:a9:d9:5c:d0:df:67:db:82:23:c5:08:1c:dd:
c0:be:cc:b1:90:b3:f1:26:56:a4:0c:b5:60:2c:5e:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:3B:3F:54:BE:9B:0D:73:35:0B:9E:FA:EE:07:49:25:B8:8F:86
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d7:26:47:2d:75:e4:30:f5:52:af:ec:34:ef:c6:0e:c3:e1:
1a:93:7a:97:c7:b6:b5:70:2a:2c:e5:f7:e1:9b:15:1d:01:95:
7a:23:c1:49:ee:78:49:83:a5:55:93:e7:b8:fd:a7:bc:5d:ac:
b8:8e:2c:13:cf:80:e7:0f:c0:4f:42:bc:50:f9:45:a4:d3:cf:
78:45:be:3a:b6:1f:59:a1:97:d3:e6:c7:d1:63:33:b3:32:98:
88:19:4d:86:e9:44:a3:df:7f:3c:a4:16:60:4a:5b:a3:53:1f:
d0:b5:4a:1b:dc:5f:55:96:05:9b:d6:74:67:00:6b:7c:dc:88:
12:18:25:52:f1:e6:eb:fa:92:1a:1a:58:27:1e:dd:59:ed:c9:
67:70:9b:c3:48:45:42:47:f7:6e:df:35:c3:24:55:6d:1d:da:
33:a9:d9:b3:9f:19:fd:b6:f9:d0:6b:97:ec:43:fb:44:c2:30:
8e:b4:24:7a:0e:cb:2d:d4:75:ee:a9:a7:bf:29:d4:60:0d:1a:
ad:76:2c:7d:34:84:c1:4c:08:80:94:84:9c:f6:05:64:04:1e:
e1:f4:55:be:cd:e6:59:1f:d0:c6:2d:95:f9:76:1d:4f:6e:14:
07:b3:c5:65:61:de:19:66:53:a3:a2:77:2c:99:1f:47:46:9d:
be:52:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:45:53 2025 by rpki-client